Avatar of jimmyca69
jimmyca69

asked on 

XP Random Reboots/BSOD - System Error 1003

Recently put together a new system with the following spec:

Athlon x2 4050e Processor 2.1ghz
Kingston 2x1GB DDR2 800MHz/PC2-6400 Memory Non-ecc CL5 Unbuffered 1.8V
Gigabyte GA-MA69VM-S2 Motherboard
Antec 500w PSU
Optiarc AD-5200A-0B 20X DVD±RW/DL Int IDE Bare Black Drive - OEM
Seagate ST3250310AS 250GB Hard Drive SATAII 7200rpm 8MB Cache - OEM

Went together fine and set it up with XP SP3, installed software and was all ok until it restarted itself. Checked event viewer and got the 1003 error.

Error code 1000008e, parameter1 c0000005, parameter2 f7ce95d0, parameter3 f28c3cb0, parameter4 00000000.

Couldnt get any other info really from it, i changed the recovery settings so i got a BSOD rather than a reboot and then began testing. The hdd passed seagate's software testing, ran memtest for 3 passes all ok, ran some stress test and cpu on its own passed no problem. It did fail on the cpu and memory blend test? i forget the name of the tester and dont have the link :(  So that could shed some light maybe? just need to find the test i had.....

I had a spare new PSU so swapped that in and its still BSOD after that so i rule out the PSU. Its not a massive spec so isnt really using much power.

Its happened three times in last 4 days now. i have attached the minidumps to see if that offers anything useful.

Thanks
James


minidump071808.txt
minidump072008.txt
minidump072108.txt
Windows XPPCComponents

Avatar of undefined
Last Comment
slam69
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

3 different faults for those minidumps which is strange the first usually points to malware/ spyware could be a trojan so download hijack this and some anti spyware and run full scans, post your hi jack thsi log back here and take it from there
Avatar of Jonvee
Jonvee

Yes, the three different minidump results could be due to RAM or virus/Malware.  Although you've already checked memory, does it consist of more than one RAM stick?  If yes, you could try removing each RAM in turn, & see if that resolves the reboots & BSOD.  

Also try Superantispyware:                        
http://www.superantispyware.com/

and a-squared Free:
http://www.emsisoft.com/en/software/free/

Although not quite identical, there's a similar problem here>
"Error code 1000008e, parameter1 c0000005 ... ":
https://www.experts-exchange.com/questions/21707752/XP-box-reboot-System-Error-1003.html
Avatar of jimmyca69
jimmyca69

ASKER

Will get a Hijackthis report and post that up

Memory has the 2x1gb sticks - ran some tests on the PC with 1 stick in and couldnt get BSOD, ran with other stick in and also couldnt get BSOD (burning cd, defrag, pc mark 05) put both in and again couldnt get it to BSOD. Problem is crashes before been quite random so unsure if re-seating ram has solved issue or if i havent been able to replicate problem.

Will post HJ log up asap
Avatar of Jonvee
Jonvee

Ok.  Well experience shows that a RAM test such as http://www.memtest.org/ needs at least 3 passes to get a reasonable result, and even then there's no guarantee.  
The suggestion of running with one stick at a time was to prove beyond any reasonable doubt.  However it does look as though you may have to run for several hours(maybe overnight) with each RAM in turn, to definitely confirm.  

Meanwhile it's still worth running those two earlier scanners when appropriate, and let slam69 see the HijackThis logfile.
Avatar of jimmyca69
jimmyca69

ASKER

Hijack log as requested

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:15:41, on 22/07/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Gigabyte\ET5\GUI.exe
C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Miller\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = isaout.internal.uwic.ac.uk:8080
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [EasyTuneV] C:\Program Files\Gigabyte\ET5\ETcall.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ZoneAlarm.lnk = C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1216368452453
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 6540 bytes
ASKER CERTIFIED SOLUTION
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of Jonvee
Jonvee

For the HJT logfile i absolutely  agree with slam69.   However, if the RAMs eventually prove to be ok then one logfile entry that HijackThis sees as slightly 'suspicious', is this next one.  
However i'm pretty sure slam69 would have seen it, & it's almost certainly safe!  The nearest recognition i can find is for Cardiff University.  
*If* you don't recognise it, let us know & we'll try & trace it further>

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = isaout.internal.uwic.ac.uk:8080

Therefore, after your RAM tests, you may like to try the Kaspersky free online virus scanner, which is a good way to find out if you have any viruses or spyware without having to uninstall your existing antivirus software>
http://www.kaspersky.co.uk/virusscanner
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

yeah saw that one but saw the asker is based in UK and teh ac segment pointed me towards a uni, i went with university of wales but close enough :O) havent ever seen an errant proxy server virus setup utilising an ac address so discounted ;O)

Jay
Avatar of jimmyca69
jimmyca69

ASKER

Hi just to clarify i work for UWIC (University of Wales Instittute Cardiff) and PC was connected to the internal network here a while back and so auto detected the proxy server.

So thats perfectly fine. Going to run a memtest overnight on offending PC and check results of that.
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

great minds jonvee :O) between us we can rule the world haha

jay
Avatar of Jonvee
Jonvee

@ jimmyca69 ... ok, good, although i'd still consider running Kaspersky free, tomorrow.  
Then, in the unlikely case that it's still unresolved, we could take a look at another group of minidumps.

@ jay  ... no doubt in my mind whatsoever    ; )
Avatar of jimmyca69
jimmyca69

ASKER

Just a quick note, have PC with me and running memtest as we speak.

Notice in memtest it says the ram is running @ 421mhz meaning DDR842mhz in total. Now is this memtest reading it incorrectly? just wondering if technically its being overclocked by the bios? and hence causing problems. Anyway assume this would cause a failure in memtest so will leave it running for a couple of hours at least.
Avatar of jimmyca69
jimmyca69

ASKER

Update - i ran memtest for over 3 hrs, getting 3 passes and no errors :(

In my experience im looking at motherboard or processor next i suppose?

I have posted recent dumps that have occured that might shed some more light
minidump3.txt
minidump4.txt
Avatar of Jonvee
Jonvee

Have tried to analyze your two minidumps but i'm getting "corrupt or in a format not understood by the debugger" errors'.   Could be this machine so investigating further.

Incidently, the suggestion of running with one stick at a time may still be an option, even though Memtest reports all ok.

Are you in fact overclocking RAM and/or CPU?
Avatar of jimmyca69
jimmyca69

ASKER

They open ok on mine, no bog standard bios settings that came with mobo - havent changed anything.

Might look to update bios if there is a newer version, also will try the one stick at a time memtest option also.
Avatar of Jonvee
Jonvee

Ok, and i'll keep plugging away at WinDbg.

Presumably your CPU and cabinet temperatures are normal?
If there's doubt you could try SpeedFan>
http://www.almico.com/speedfan.php
Avatar of jimmyca69
jimmyca69

ASKER

have downloaded that tool and will report back

According to bios and also the easytune software that comes with the mobo the cpu temp rarely goes above 30 and the system never above 35. Even when i was testing cpu the cpu temp never got above 40 on full load as i was monitoring it.

Any recommended cpu testers i can try to confirm cpu ok?
Avatar of Jonvee
Jonvee

Due to CPU Tester inexperience i couldn't necessarily recommend one, although this one is free>
"Hot CPU Tester Pro":
http://www.dirfile.com/hot_cpu_tester_pro.htm

Here's one at a cost, but i can certainly recommend "majorgeeks" for reliable software>
"Hot CPU Tester Pro 4.4.1":
http://www.majorgeeks.com/download273.html
Avatar of jimmyca69
jimmyca69

ASKER

ok thanks for those, i managed to download that hotcpu tester so will try that.

Orthos was the one i used before as found it again. http://sp2004.fre3.com/beta/beta2.htm

It is fine when testing cpu but when you run the blend option that stresses ram and cpu - it fails after a minute.
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

to me that points to an over heating issue then, do you have teh diagnostic tools for your machine to run a fan test?
Avatar of jimmyca69
jimmyca69

ASKER

sorry slam not sure what you mean?

I downloaded that smartfan but it doesnt seem to pick up ay temps other than that of HDD which is 38 degrees.

I ran the orthos test again, the blend test this time ran 20mins without error and also ran hotcpu and it ran for 30 mins all ok.

I am in process of re-installing all the latest drivers from the mobo website to make sure they are ok. Apparently XP SP3 has habit of replacing some drivers and causing some BSOD on AMD chipsets so im trying that out now. As thinking about it these problems only occurred since SP3 was installed but then again i did install it soon after the OS went on.
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

well you could be onto something then, however the internal diagnostics is a set of tools set up by the manufacturer to test teh onboard ardware, if you log onto teh manufacturers website you shoudl be able to find them usually a disk you plug in and then off you go, usually included is a fan test piece of software which puts teh internal fan through a series of high rotations to see if it is functioning correctly, often when overheating is occuring it is due to teh fan not reaching teh high stages of its revolutions
Avatar of jimmyca69
jimmyca69

ASKER

ah right ok - with this board i have easytune that monitors fan and cpu.

Currently whilst running orthos cpu blend test the system temp after 3 mins is 39, cpu is 39 and cpu fan running at 2295rpm.

Whilst watching it stopped after 3 mins citing a hardware failure - temp never got above 39 and once stopped cpu dropped back to 30 eventually. Its not crashing the system just stopping the test, but not sure what its saying is wrong. Error message i get is :

Using CPU #1
Beginning a continuous self-test to check your computer.
Press Stop to end this test.
Test 1, 4000 Lucas-Lehmer iterations of M19922945 using 1024K FFT length.
FATAL ERROR: Rounding was 0.4951171875, expected less than 0.4
Hardware failure detected, consult stress.txt file.
Torture Test ran 3 minutes 39 seconds - 1 errors, 0 warnings.
Execution halted.

Avatar of jimmyca69
jimmyca69

ASKER

just to add that there is no stress.txt file created - i have searched for it and just isnt there so cant get more info.
Avatar of Jonvee
Jonvee

Although you swapped the PSU for new, just wondering if the CPU volts are ok on this one .. the CORE volts, etc.
Avatar of Jonvee
Jonvee

The stress.txt file is supposed to be in the same folder as the .exe file, but reports seem to indicate that a number of people are unable to locate this txt file!
Avatar of jimmyca69
jimmyca69

ASKER

Update: Ran memtest overnight and got 23 passes so all ok.

Just to check the settings i mentioned previously about the ram - is it ok that its running @ DDR842 (421mhz each stick)  i assume given the passes that yes it is ok?

I can check the volts via the Easytune software and when running the following range is shown

Vcore    = 1.170-1.190
+3.3v     = 3.340
+12v      = 12.170-12.230
CPU Vid = 1.200
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

the speed is fine as it should be overclocked by the program to test it,

narrowed down to the cpu or the fan, fan is likely culprit did you have a look fo rthe internal diagnostics from teh manufacturer
Avatar of Jonvee
Jonvee

From your overnight RAM test results then yes, i too assume that all is ok.  

All along i've had a slight suspicion about the cooling, and i agree with slam69's thoughts. You may even want to consider exchanging that fan (if convenient at this time)before going any further.

From reading around the subject of overclocking, and ~if~ your problem remained unresolved, you could take a look at the Vcore voltage(1.170-1.190).  Suggest a slight tweak to 1.20 or even 1.21, and if unsuccessful a decrease tweak to 1.15, to check for any improvements.
Avatar of jimmyca69
jimmyca69

ASKER

thought i had got somewhere with us - all the tests done yesterday and this morning and no BSOD. Began everday testing by burning CD, downloading some game demo's and installing them just to push machine. Was all going so well and then BSOD :( Attached is the dump text but doubt it will reveal anything.

I couldnt find gigabyte's internal diagnostics, there is the easytune 6 software that gives cpu temp, voltages, fan speed etc but nothing specific for fan that i can find.

Also found the BIOS for this board to be most unhelpful, no overclocking options to change ram timings, voltages etc etc which i find odd.
minidump240708.txt
Avatar of jimmyca69
jimmyca69

ASKER

quick update - was able to use the ctrl F1 function to get the advanced bios settings for the mobo but still cant find options to increase the vcore voltage.

I did however change the bios settings so that the cpu fan was not being controlled by the bios and so it was on full at all times and now constantly runs at 3500rpm. Did a search for cpu fan testing software and its throwing up nothing.

Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

ok not ideal but keep the fan running at the top speed and wait 24 hours conduction usual activites as before and see if you get a BSOD if none then we can start to assume its yoru fan, and then we havea  couple of options, either exchanging teh current on board one or fitting an additional, but lets see what happens
Avatar of jimmyca69
jimmyca69

ASKER

Right fan was on full speed and got BSOD again.

Wanted to rule out software issue so re-installed OS and literally after only 15mins of installing board drivers it crashed once again with same error.

Tearing my hair out now - beginning to suspect faulty cpu or motherboard. Problem is the company I bought from will test any returned products. Unsure how they will replicate problem before saying thats its not faulty and charging me for it.

if it is CPU then why didnt throw up errors on hotcpu or orthos tests?

If it is mobo - then why did memtest pass, cpu tests pass etc as all these running through the motherboard.

Any other suggestions of what maybe to try to root out the cause of this? Tempted to just buy a new motherboard and if that works then send old one back as only 7 days old and have 28 days to send stuff back.
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

this is becoming frustrating, has to be hardware as OS reinstalled iw ould return the unit as a whole and advise them of teh faults take in teh minidumps with you as proof of your issue and that you have tried to pinpoint it yourself but have exhausted all avenues, if they test it they shoudl have no issue recreating the fault, even sit in on the test if you can spare the time

id love to be able to give you the issue but from over the minitor assistance im running out of ideas
Avatar of Jonvee
Jonvee

Will get back to you on that question, meanwhile, your last minidump indicated that probably the symevent.sys file was the problem.

symevent.sys information:
http://www.file.net/process/symevent.sys.html

Are you really sure there is no virus or Malware problem?
Avatar of Jonvee
Jonvee

Can you show us any more minidumps, please?
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

def nothing in hijack this indicates malware etc

the variation in files within teh minidum,ps to me indicates that it is justa  load on teh machien causing it to blue creen causing the variation in causes due to whatever activity is happening at the time
Avatar of jimmyca69
jimmyca69

ASKER

Assume thats to do with Symantec AntiVirus Corporate Edition 10.1 im running.

Have run it on many systems but could that be causing issues? Maybe with the chipset? mobo?

Ill get the latest one that occured on the brand new OS
Avatar of Jonvee
Jonvee

@ jimmyca69 ... the last dump was a .txt file.  
Also, no problem, but you don't appear to have the correct symbols for WinDbg.

For later, if you wish to analyse your own dump file>
"How to read the small memory dump files that Windows creates for debugging":
http://support.microsoft.com/kb/315263

The dumps are normally located in c:\windows\minidump\    
or  %systemroot%\minidump\

@ slam69   Agreed, nothing 'visible' in HijackThis logfile, but although perhaps unlikely, there could still be other nasties present, eg rootkit.  This would not necessarily show up in the HJT log.
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

true true
Avatar of jimmyca69
jimmyca69

ASKER

Yeah i converted the mini dump files to notepad format - if easier i can just attach the actual *.dmp files?
Avatar of Jonvee
Jonvee

@ jimmyca69  .. ok tks.

The Kaspersky free online virus scanner is not an 'absolute guarantee' of a clean system, but it is a pretty good way to find out if you have any viruses or spyware without having to uninstall your existing antivirus software.  You may want to try this one, 'when convenient'>
http://www.kaspersky.co.uk/virusscanner

We've more powerful tools/scanners *if* a rootkit was suspected.
Avatar of jimmyca69
jimmyca69

ASKER

Have run the kaspersky scan and its clean (it should be as hasnt even been on web or network yet!)

Unfortunately i only saved the txt file versions of the dmp files to my pen drive and now after re-installing OS i lost the originals. I do have a couple that occured since the rebuild which i will post up as soon as seagate tools finish testing drive.

I'd love it to be something like a rootkit but i just cant see it. NAV was installed first time before joining network and had latest virus defs all setup. Plus i was behind works firewall so chances of it picking it up something are quite slim. If there is a bit of software that can rule that out though ill try it!

Looking at getting a replacement mobo ordered to get here tomorrow so i can at least swap that in and start over. If the problem re-appears though with new board then im pretty stuck as its clearly not the motherboard then! These kind of errors are normally psu, mobo, memory or processor. As far as im concerned its not psu and memory (used 2 new psu's problem occured on both - memtest for 15hrs) so that leaves mobo or processor.

But the random-ness of the crashes tends for me to look at CPU as mobo will constantly be working whilst the cpu depends on the usage and crashes do only happen when its under some kind of load i.e. installing software, disk defrag, burning cd etc etc. But suppose you could say that when processor is under heavy load the mobo will be too and also questions asked as to why the stress tests didnt replicate problems it was only in windows normal running mode?!? grrr
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

then ill await your update tomorrow to see whats happeing with the mobo, frustrating one this
Avatar of Jonvee
Jonvee

>If there is a bit of software that can rule that out though ill try it!<
We have our own favourite tools, and Kaspersky is good.  The next step would be ComboFix which does present a slight risk to your system.  It would normally be used if HijackThis found nothing yet we knew you were quite heavily infected.
 
Recommend you attempt to get us a minidump or two, before the replacement mobo arrives.
     
If you decide to fit the mobo tomorrow, nothing lost in first running ComboFix.  You could post back for all Combo details.

Ah, quick check!  Is your RAM made up of two sticks?  If yes, have you tried running on one of them to see if that resolves it?  If no, re-fit the 2nd RAM, & retest.  Any difference?    i know, memtest reported it/them ok .. but it's a definite possibility!
Avatar of jimmyca69
jimmyca69

ASKER

I havent tried just running on 1 yet - i assumed that with both in and memtest success it cant be ram?

If one stick faulty would that cause the issue? surely memtest would test both?
Avatar of Jonvee
Jonvee

Just re-logged on --  yes, both would be tested by Memtest.  
However, ~no~ RAM Tester is perfect, & there are occasionally cases where running just one RAM stick will resolve an issue.  
IMHO it's worth trying, as you appear not to have already done so.  If no improvement, obviously try the 2nd stick.
Avatar of kr0me
kr0me
Flag of United Kingdom of Great Britain and Northern Ireland image

Sounds daft and probably a long shot, but the CPU does have thermal compound on it yeah? A very thin layer?

The PSU could possibly be faulty which causes very random and bizarre problems.
Avatar of jimmyca69
jimmyca69

ASKER

Yes the CPU has the thermal compound, part of the oem heatsink and fan package that came with cpu.

Unless both new PSU's i have used have same fault then im doubting it is the psu to be honest.

Put one stick in last night and tried everything to fully test and it didnt BSOD. I did also read that some motherboards have a problem with certain memory when running in dual channel mode? and that PC's
 
Work fine with 1 in but when both in causes problems. Time will tell i suppose - but if that is the case then how do i verify if its the memory or the mobo causing the issues with dual channel?

would this make sense even though memtest didnt pick up errors? i mean does memtest test them whilst in dual channel mode or does it limit itself to testing each stick if you get what i mean.
Avatar of jimmyca69
jimmyca69

ASKER

Here are the actual dmp files i promised as well

http://www.flyupload.com/?fid=9600378 

http://www.flyupload.com/?fid=2987567 

http://www.flyupload.com/?fid=4834017 

Another quick question - could hard drive cause these problems? noticed today a slight clunking noise on startup before the drive spins into action, normal for sata drive? or possible indication that something not right? it passes all the tests ive run but still you never know.
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

really doubt this is hard drive related you would see more consistent faults if that were the case, you shoudl have yoru new mobo today, i owuld get that plugged in and tested to see if it resolves as everything else right now for me is just supposition
Avatar of jimmyca69
jimmyca69

ASKER

new mobo here monday now - the orthos stress test is only thing i can get to fail at moment - always fails on the blend test quite quickly.

Everything says to me memory controller on mobo is faulty and that i should wait for new one to test but i have nagging feeling im missing something
SOLUTION
Avatar of Jonvee
Jonvee

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Avatar of jimmyca69
jimmyca69

ASKER

ok im going to stick one ram in and leave overnight, and then do same for the other

will let you know the results on monday!

I assume to confirm mobo is problem the memory both should pass ok?
Avatar of Jonvee
Jonvee

Estimating 90% chance of Mobo being the problem if both RAMs pass ok, each RAM on a ~ 24 hour soak.
Avatar of jimmyca69
jimmyca69

ASKER

New mobo came on saturday - memtests on the single ram sticks were fine.

fitted new mobo yesterday and spent all morning and last night testing and this seems to have solved problem. Clearly old mobo not up to the job.
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

cool well at least its been pinpointed, if your happy to close please do so accepting any comments as answers you feel were helpful
Avatar of Jonvee
Jonvee

Good, pleased that you've resolved it!  Thank you for the good feedback throughout.
Avatar of Jonvee
Jonvee

@ slam69 ..   lol,  just did a 'once in a blue moon' check of 'member rank', to see you passing me and disappearing over the horizon at a rate of knots!  .. it's been good working alongside you   ; )
Avatar of slam69
slam69
Flag of United Kingdom of Great Britain and Northern Ireland image

gotta find something to keep me busy at work :O)

Jay
Windows XP
Windows XP

Microsoft Windows XP is the sixth release of the NT series of operating systems, and was the first to be marketed in a variety of editions: XP Home and XP Professional, designed for business and power users. The advanced features in XP Professional are generally disabled in Home Edition, but are there and can be activated. There were two 64-bit editions, an embedded edition and a tablet edition.

119K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo